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DETAILED ACTION 

1 . This Office Action is in response to Applicant's Amendment, filed June 18, 2009. 
Claims 1-27 are pending in this case. Clams 1-11 are under examination. Claims 12- 
27 had been previously withdrawn. Claims 1, 2, 3, 4, 5, 6, 7, 8, 9, and 10 are currently 
amended. 

Response to Arguments 

2. Applicant's arguments filed June 18, 2009 have been fully considered but they 
are not persuasive. 

3. Applicant argues, regarding claim 1 , as currently amended, that nothing in the 
cited prior art teaches, discloses or suggests "storing a person identification certificate 
received from a person identification unit on an information processing apparatus 
remotely from the server." 

4. Examiner respectfully disagrees and directs attention to Bianco at, e.g. col 3 In 7- 
17 where "satellite enrollment station can be used to enroll users into biometric system 
at remote location." See also col 9 In 35-42, col 10 In 22-27, col 12 In 23-30, col 18 In 
25-32, fig 7, col 22 In 40-50, col 25 In 54-65, col 28 In 60 - col 29 In 20, col 51 In 30-35. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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6. Claims 1-11 are rejected under 35 U.S.C. 103 (a) as being unpatentable over 
Bianco ET al (US 6,256,737). 

7. Regarding claim 1 - 

8. Bianco discloses a person authentication application data processing system 
which performs a person authentication process by comparing a template extracted 
from a person identification certificate, the template including person identification data 
of an individual user who uses an information processing apparatus, and user input 
sampling information, (104, col 3 In 1-5, "compared measurements of unique personal 
characteristics") said person authentication application data processing system 
comprising: 

an information processing apparatus configured to perform person authentication 
(e.g. col 3 In 7-17, "administration station"); and 

a person identification certificate unit configured to issue person identification 
certificates, (e.g. col 3 In 33-40, "certificate authority system", 104), 

wherein, 

said information processing apparatus is configured to retrieve a person 
identification certificate for person authentication from the local storage device based on 
user input information, extracted (e.g. col 16 In 5-20, ""switchboard object receives the 
request, via comm. object, and creates receiver object') 

the information processing apparatus is configured to request the person 
identification certificate unit issue a new person identification certificate if the person 
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identification certificate does exist in the local storage device, extracted (e.g. col 16 In 5- 
20) 

said person identification certificate unit is configured to issue a new 
person identification certificate including an encrypted template, which can be 
decrypted in said information processing apparatus, in response to the request 
from the information processing apparatus(e.g. col 54 In 10-28, " digital certificate 
from a certificate authority"), and 

said information processing apparatus is configured to receive the person 
identification certificate from the person identification unit and store the person 
identification certificate issued from said person identification certificate unit in the local 
storage device of the information processing apparatus remotely from the server, (e.g. 
col 54 In 10-28, "encrypted digital certificate containing . . . identification information", 
also col 9 In 35-42, col 10 In 22-27, col 12 In 23-30, col 18 In 25-32, fig 7, col 22 In 40- 
50, col 25 In 54-65, col 28 In 60 - col 29 In 20, col 51 In 30-35). 
9. Bianco does not use the same steps in the same order as the instant application. 
Mere re-ordering of steps, however, would be obvious to one of ordinary skill in the art 
and thus does not confer patentability. Note also that Bianco, at, e.g., : "FIG. 7 includes 
biometric server 104 (FIG. 1), computer 208 (or alternatively remote/web computer 210, 
both from FIG. 2), authentication interface 704, authentication interface 706, 
authentication object 708, database object 710, policy object 712, comm object 716, 
comm object 718, authentication object 720 and biometric device object 722. Here, 
biometric server 104 is performing as the server and computer 208 is performing as the 



Application/Control Number: 09/944,501 Page 5 

Art Unit: 3685 

client." (col 22, In 41-49). Thus, Bianco does allow for either remote or local template 
checking. 

10. Regarding claim 2 - 

1 1 . Bianco discloses a person authentication application data processing system 
according to Claim 1 , wherein, said information processing apparatus creates a pair of 
identifiers of each person identification certificate and stores the pair of identifiers in the 
storage device when said newly obtained person identification certificate is a person 
identification certificate corresponding to the same user for an existing public key 
certificate which has already been stored in said information processing apparatus, (e.g. 
col 54 In 20-30). 

12. Regarding claim 3 - 

13. Bianco discloses a person authentication application data processing system 
according to Claim 1 , further comprising a certificate unit that issues public key 
certificates, wherein, said information processing apparatus retrieves a public key 
certificate used during data communication with an external apparatus, with stored data 
of the storage device of the information processing apparatus being used as the 
retrieval target on the basis of the user input information, said information processing 
apparatus is configured to (a) create a public key and a secret key when the applicable 
public key certificate cannot be extracted, (b) transmit transmits the created public key 
to the person identification certificate unit (c) make a request for issuing a person 
identification certificate (d) issue a public key certificate corresponding to an individual 
user or a public key certificate corresponding to said information processing apparatus, 
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and (e) store the public key certificate issued from said certificate unit in the local 
storage device of the information processing apparatus, (e.g. col 54 In 20-30). 

14. Regarding claim 4 - 

15. Bianco discloses a person authentication application data processing system 
according to Claim 3, wherein, said information processing apparatus creates pair 
information of identifiers of each certificate and stores the pair information in the storage 
device when said newly obtained person identification certificate is a person 
identification certificate corresponding to the same user for an existing public key 
certificate which has already been I stored in said information processing apparatus, 
(e.g. col 55 In 45-60). 

16. Regarding claim 5 - 

17. Bianco discloses a person authentication application data processing system 
according to Claim 3, wherein, said information processing apparatus creates identifiers 
of each certificate, stores the pair information in the local storage device, and registers a 
process identifier which identifies a process including services to be used when said 
newly obtained person identification certificate is a person identification certificate 
corresponding to the same user for an existing public key certificate which has already 
been stored in said information processing apparatus, (e.g. col 55 In 45-60). 

18. Regarding claim 6 - 

19. Bianco discloses a person authentication application data processing system 
according to Claim 1 , further comprising a service distribution device configured to 
receive various services from a service provider under the control of a service 
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registration server when the service distribution device is registered with the service 
registration server, wherein said information processing apparatus performs a person 
authentication process based on a verification process between the template extracted 
from the person identification certificate and user input sampling information, the 
template being person identification data of an individual user who uses the information 
processing apparatus, and performs user registration for said service registration server 
on the condition that person authentication is established, (e.g. col 2 In 50-60). 

20. Regarding claim 7 - 

21 . Bianco discloses a person authentication application data processing system 
according to Claim 1 , further comprising: 

a service distribution device configured to receive various services from a service 
provider under the control of a service registration server when the service distribution 
device is registered with the service registration server, wherein said information 
processing apparatus performs a mutual authentication with said service provider by 
using a public key certificate corresponding to an individual user or a public key 
certificate corresponding to said information processing apparatus in a process for 
receiving service distribution from said service provider, and said service provider 
provides services for said information processing apparatus upon confirmation that the 
public key certificate used for said mutual authentication corresponds to an authorized 
user or device registered in said service registration server and said mutual 
authentication is established, (e.g. abstract, col 3 In 33-40). 

22. Regarding claim 8 - 
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23. Bianco discloses a person authentication application data processing system 
according to Claim 1, wherein data communication between said information processing 
apparatus as a person authentication execution entity and the person identification 
certificate unit as a person identification certificate issuing entity is performed on the 
condition that a mutual authentication process is established, (e.g. abstract, col 2 In 53 
- col 3 In 5). 

24. Regarding claim 9 - 

25. Bianco discloses a person authentication application data processing system 
according to Claim 1 , wherein, a data transmission device creates an electronic 
signature for transmission data, and a receiving device verifies the electronic signature 
for data communication between said information processing apparatus as a person 
authentication execution entity and the person identification certificate unit as a person 
identification certificate issuing entity, (e.g. col 55 In 47-57). 

26. Regarding claim 10 - 

27. Bianco discloses a person authentication application data processing system 
according to Claim 1 , wherein an encryption key used to encrypt the template stored in 
the person identification certificate issued from said person identification certificate unit 
is a public key which is set for said information processing apparatus or an individual 
user. (e.g. col 55 In 37-45). 

28. Regarding claim 11 - 

29. Bianco discloses a person authentication application data processing system 
according to Claim 1, wherein said template is biometric information of a person such as 
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fingerprint information, retina pattern information, iris pattern information, voice print 
information, and handwriting information, or a non-biometric information such as a seal, 
a passport, a driver's license, and a card, or any combination of two or more of the 
biometric information and the non-biometric information, or a combination of any of the 
information and a password (e.g. abstract). 

Conclusion 

30. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

31 . Matchett et al (US 5,229,764) discloses a continuous biometric authentication 
matrix. 

32. Musgrave et al (US 6,505,193) discloses a system and method of fast biometric 
database searching using digital certificates. 

33. Marckini et al (US 5,907,149) disclose an identification card with delimited usage. 

34. Ohtsuki et al (US 5,831 ,547) disclose a wireless card system. 

35. Khideckel et al (US 2001/0027527) disclose a secure transaction system. 

36. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

37. A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
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TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

38. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to CRISTINA SHERR whose telephone number is 

(571 )272-671 1 . The examiner can normally be reached on 8:30-5:00 Monday through 
Friday. 

39. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Calvin L. Hewitt, II can be reached on (571)272-6709. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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40. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

CRISTINA OWEN SHERR 

Examiner 
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/ANDREW J. FISCHER/ 

Supervisory Patent Examiner, Art Unit 3621 



